Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/kbkI8RvDiJrnetmhHz9BM_Gcqno.roa
File: kbkI8RvDiJrnetmhHz9BM_Gcqno.roa (raw, json)
Hash identifier: s+VqflDnmS4+SWzJ0QNoYmW81XAxeB0gcPfY97iEf4w=
Subject key identifier: 91:B9:08:F1:1B:C3:88:9A:E7:7A:D9:A1:1F:3F:41:33:F1:9C:AA:7A
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019426D98E82F55657D307D450F5AFD30D68
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/kbkI8RvDiJrnetmhHz9BM_Gcqno.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 62.169.152.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8e:82:f5:56:57:d3:07:d4:50:f5:af:d3:0d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91b908f11bc3889ae77ad9a11f3f4133f19caa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:66:1b:95:18:7a:48:8b:96:86:1c:30:69:
5a:c8:cb:b8:ec:84:c3:80:8d:b1:d2:4d:40:f9:7a:
57:54:25:8c:4f:47:bb:85:a8:81:cd:83:43:96:be:
c4:58:cd:c1:d2:25:71:99:a2:64:16:25:87:df:33:
66:55:77:b1:08:3c:ea:be:09:a6:e2:a9:5b:60:90:
60:5d:89:ab:aa:37:93:2a:aa:67:a9:0e:99:fc:8c:
ef:ad:94:74:ec:92:61:36:28:bb:4c:17:de:27:7e:
00:02:96:ad:37:66:e0:09:87:3f:25:75:22:10:82:
cc:12:06:17:09:7d:76:ad:36:86:f9:55:93:0c:06:
f2:a1:35:8c:5e:ce:bc:60:e8:ff:b1:d5:73:6a:4f:
60:b5:12:27:c0:48:36:81:46:a8:9c:97:0c:88:1a:
72:28:b9:77:77:66:c0:85:24:4c:17:16:e6:92:15:
5e:6b:cc:5c:40:b6:e4:36:eb:fe:89:14:a5:c4:91:
e5:6c:78:0b:f1:6c:9f:d0:e9:38:4f:39:40:9a:b3:
11:95:76:a9:5c:3f:1d:e4:1c:14:18:d4:b6:4b:16:
19:3f:bc:b4:47:25:7b:12:2b:4d:c5:d3:19:28:97:
56:be:1a:38:55:39:f8:1d:7e:28:1b:2a:00:a7:d6:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B9:08:F1:1B:C3:88:9A:E7:7A:D9:A1:1F:3F:41:33:F1:9C:AA:7A
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/kbkI8RvDiJrnetmhHz9BM_Gcqno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.152.0/24
89.36.35.0/24
Signature Algorithm: sha256WithRSAEncryption
19:37:97:1f:82:e6:53:2a:d6:64:43:7f:40:9b:18:a4:65:23:
dd:b3:d1:d0:1f:13:b8:a8:e8:94:e7:d8:c0:95:0d:bb:b8:3a:
1e:b8:bb:cd:3b:e5:15:e6:ca:3b:6a:df:80:57:2d:e1:3d:71:
2a:16:25:83:33:b6:95:51:ac:ee:74:94:54:b7:c7:88:c8:4a:
fb:8d:9b:55:50:fa:52:67:e4:4c:0f:97:6e:1c:fe:60:79:13:
13:03:f2:7d:83:a8:14:1d:15:d2:3d:39:9e:db:70:99:7c:dc:
f5:ca:74:ba:0b:be:76:00:17:1d:4a:35:90:f0:cc:1e:72:a3:
96:78:2c:a6:2c:6a:20:10:49:45:b1:a9:3c:66:9d:8b:c5:da:
1e:de:69:71:1d:81:9f:52:bb:62:8f:65:a2:ee:c5:bc:fe:70:
76:eb:5d:a4:ff:60:57:6c:e7:62:58:54:5e:40:0c:35:a1:9d:
bd:d5:ab:23:74:0f:56:80:cc:1d:6d:bf:0f:ef:5b:2b:a0:55:
f7:47:f2:c8:ec:61:f9:79:38:50:51:ab:ed:81:e7:4e:61:17:
51:f4:e7:e2:40:0d:f4:28:00:f6:66:c1:95:ef:68:08:7c:4a:
66:87:78:da:c7:ae:84:6a:d1:e6:68:93:24:b6:e1:e8:90:53:
fa:8a:a4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:35 2025 by rpki-client